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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claims 12-15, and 30-31 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Yatsukawa (US - 6,148,404). 

Regarding claim 12, Yatsukawa discloses a method for performing 
authentication by a mobile node in a wireless local area network including at least two 
access points for setting up wireless association with the mobile node and an 
authentication server for authenticating the mobile node, the method comprising the 
steps of: 

when associating with a first access point and performing initial 
authentication, generating a first private key with a secret previously 
shared with the authentication server (col. 16, lines 56-61); 
generating first authentication information to be used during next 
authentication request, and transmitting a first enciphered message 
generated by enciphering the first authentication information with the 
first private key to the authentication server (col. 16, lines 61-67); 
upon receiving a second enciphered message from the authentication 
server in response to the first enciphered message, acquiring a first 
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session key by deciphering the second enciphered message with the 
first private key (col. 17, lines 1-13); 

performing secure communication with the first access point by using 

the first session key (col. 17, lines 14-18). 
Regarding claim 13, Yatsukawa discloses the method of claim 12 as described 
above. Yatsukawa also discloses wherein the first authentication information includes a 
temporary identifier of the mobile node, a password for generating a private key to be 
used during next authentication, and a random number (col. 16, lines 45-52; fig. 2, 
"A1"). 

Regarding claim 14, Yatsukawa discloses the method of claim 13 as described 
above. Yatsukawa also discloses wherein the first enciphered message includes a 
permanent identifier of the mobile node and the first authentication information (fig. 5, 
"authentication token"). 

Regarding claim 15, Yatsukawa discloses the method of claim 13 as described 
above. Yatsukawa also discloses wherein the second enciphered message includes 
the random number and the first session key (fig. 6, "C5" and its descriptions). 

Regarding claim 30, Yatsukawa discloses a method of performing 
authentication of a mobile node by an access point with which the mobile node initially 
associates or re-associates due to handover, in a wireless local area network including 
the access point for setting up association with the mobile node and an authentication 
server for authenticating the mobile node, the method comprising the steps of (title, and 
abstract): 
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when associating with the mobile node and performing authentication, 
receiving an enciphered message from the authentication server (col. 
16, lines 53-67); 

acquiring a session key for secure communication with the mobile node 
by deciphering the enciphered message with a private key previously 
shared with the authentication server (col. 17, lines 1-13); 
performing secure communication with the mobile node by using the 
session key (col. 17, lines 14-18). 
Regarding claim 31, Yatsukawa discloses the method of claim 30 as described 
above. Norefors also discloses wherein the enciphered message includes a temporary 
identifier generated by the mobile node during previous authentication, and a random 
number (figs. 3, 5 & 6; and its descriptions). 

Allowable Subject Matter 

3. Claims 1-11, and 20-29 are allowed. 

4. The following is a statement of reasons for the indication of allowable subject 
matter: Although, Yatsukawa (US - 6,148,404) teaches or suggests an authentication 
method. Yatsukawa also discloses generating a session key, enciphering the session 
key. Norefors et al. (hereinafter "Norefors") (US - 6,370,380 B1 ) teaches or suggests a 
method for secure handover (i.e., in a wireless local area network including at least two 
access points for setting up wireless association between the mobile node and an 
authentication server for authenticating the mobile node). Norefors teaches of 
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transmitting a first message containing an encrypted security token and a hash code 
(i.e., a first private key). Then, in the mobile terminal, the encrypted security token is 
deciphered using an encryption key that is shared by the mobile terminal and the first 
access point (i.e., acquiring first authentication information to be used during next 
authentication by deciphering the first enciphered message with the first private key). 
The mobile terminal then re-encrypts, and transmits the security token using an 
encryption key that it shares with the second access point. The second access point 
then deciphers the re-encrypted security token using the encryption key that it shares 
with mobile terminal. Even more, Maste (US 2004/0088550 A1) teaches or suggests an 
access management system for managing access of wireless terminals to a wireless 
communication network. Maste also teaches authenticating and re-authenticating in a 
known wireless local area network (WLAN), wherein the access controller (AC) sends a 
signal to authentication server (AS) asking whether the PDA is registered. In response 
to the query, the AS determines whether the PDA is listed user and returns the answer 
including a master encryption key Ki (i.e., a first private key). However, none of the 
references found teaches or suggests each element, and limitation as details as 
claimed in the independent claims 1 and 20. 

5. Claims 16-19 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. 
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Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Norefors et al. (US - 6,370,380 B1 ) 
Ohba et al. (US 2004/0098588 A1) 
Meier et al. (US 2004/01 03282 A1 ) 
Maste (US 2004/0088550 A1) 
Zhang et al. (US 2002/0174335 A1) 
Lor et al. (US 2004/0068668 A1 ) 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Wayne Cai whose telephone number is (571) 272-7798. 
The examiner can normally be reached on Monday-Friday; 9:00-6:00; alternating Friday 
off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Joseph Feild can be reached on (571) 272-4090. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). /) y ^ 




Wayne Cai 
Examiner 
Art Unit 2681 



ERIKA wGARY 




